CVE-2025-47152

CVE-2025-47152 is a PDF-XChange Editor EMF processing vulnerability. Cisco Talos details an out-of-bounds read in the EMF functionality of PDF-XChange Editor 10.6.0.396 caused by insufficient validation of the Facename field within EMR_EXTCREATEFONTINDIRECTW, which can lead to leakage of memory c...

CVE-2025-47152

An out-of-bounds read vulnerability exists in the EMF functionality of PDF-XChange Co. Ltd PDF-XChange Editor 10.6.0.396. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive...

PDF-XChange Editor EMF File EMR_POLYDRAW16 PT_BEZIERTO Out-Of-Bounds Read Vulnerability

Talos Vulnerability Report TALOS-2025-2171 PDF-XChange Editor EMF File EMRPOLYDRAW16 PTBEZIERTO Out-Of-Bounds Read Vulnerability August 5, 2025 CVE Number CVE-2025-27931 SUMMARY An out-of-bounds read vulnerability exists in the EMF functionality of PDF-XChange Editor version 10.5.2.395. By using ...

Linux Distros Unpatched Vulnerability : CVE-2024-23449

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An uncaught exception in Elasticsearch = 8.4.0 and = 8.4.0 and 8.11.1 occurs when an encrypted PDF is passed to an attachment processor through the REST API. Th...

PT-2025-31935 · Tracker · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor version 10.6.0.396 Description: An out-of-bounds read issue exists in the EMF functionality. Exploitation involves using a specially crafted EMF file, which could lead to the disclosure of sensitive information...

CVE-2025-27931: Out-of-bounds Read

An out-of-bounds read vulnerability exists in the EMF functionality of PDF-XChange Editor version 10.5.2.395. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information...

PDF-XChange Editor buffer error vulnerability

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. An out-of-bounds read vulnerability exists in the PDF-XChange Editor EMF function, which can be exploited by an attacker to disclose sensitive information...

PDF-XChange Editor buffer error vulnerability

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. An out-of-bounds read vulnerability exists in the PDF-XChange Editor EMF feature, which can be exploited by an attacker to disclose sensitive information...

PDF-XChange Editor EMF File EMR_EXTCREATEFONTINDIRECTW Facename Out-Of-Bounds Read Vulnerability

Talos Vulnerability Report TALOS-2025-2203 PDF-XChange Editor EMF File EMREXTCREATEFONTINDIRECTW Facename Out-Of-Bounds Read Vulnerability August 5, 2025 CVE Number CVE-2025-47152 SUMMARY An out-of-bounds read vulnerability exists in the EMF functionality of PDF-XChange Co. Ltd PDF-XChange Editor...

CVE-2025-47152: Out-of-bounds Read

An out-of-bounds read vulnerability exists in the EMF functionality of PDF-XChange Co. Ltd PDF-XChange Editor 10.6.0.396. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive...

DEBIAN-CVE-2025-46206

An issue in Artifex mupdf 1.25.6, 1.25.5 allows a remote attacker to cause a denial of service via an infinite recursion in the mutool clean utility. When processing a crafted PDF file containing cyclic /Next references in the outline structure, the stripoutline function enters infinite recursion...

CVE-2025-46206

An issue in Artifex mupdf 1.25.6, 1.25.5 allows a remote attacker to cause a denial of service via an infinite recursion in the mutool clean utility. When processing a crafted PDF file containing cyclic /Next references in the outline structure, the stripoutline function enters infinite recursion...

CVE-2025-46206

An issue in Artifex mupdf 1.25.6, 1.25.5 allows a remote attacker to cause a denial of service via an infinite recursion in the mutool clean utility. When processing a crafted PDF file containing cyclic /Next references in the outline structure, the stripoutline function enters infinite recursion...

Reachable Assertion

Overview Affected versions of this package are vulnerable to Reachable Assertion due to unscaled-face == NULL assertion failure for cairoftunscaledfontfini in cairo-ft-font.c. An attacker with local access could crash the system by processing a specially crafted PDF file with pdftocairo...

Uncontrolled Recursion

Overview mupdf is a MuPDF.js Affected versions of this package are vulnerable to Uncontrolled Recursion when processing a crafted PDF file containing cyclic /Next references in the outline structure via the stripoutline function. An attacker can cause the application to enter an infinite recursio...

Uncontrolled Recursion

Overview PyMuPDFPro is a Commercial extensions for PyMuPDF; enables Office document handling, including doc, docx, hwp, hwpx, ppt, pptx, xls, xls, and others. Supports text and table extraction, document conversion and more. Affected versions of this package are vulnerable to Uncontrolled Recursi...

CVE-2025-50420

An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service DoS...

CVE-2025-50422

Cairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled-face == NULL" assertion failure for cairoftunscaledfontfini in cairo-ft-font.c...

CVE-2013-10057

A stack-based buffer overflow vulnerability exists in Synactis PDF In-The-Box ActiveX control PDFIN1.ocx, specifically the ConnectToSynactis method. When a long string is passed to this method—intended to populate the ldCmdLine argument of a WinExec call—a strcpy operation overwrites a saved...

CVE-2025-46206

An issue in Artifex mupdf 1.25.6, 1.25.5 allows a remote attacker to cause a denial of service via an infinite recursion in the "mutool clean" utility. When processing a crafted PDF file containing cyclic /Next references in the outline structure, the "stripoutline" function enters infinite...